sonar-scan

Extract SonarCloud quality gates, issues, and hotspots into structured snapshots.

4|Updated Apr 4, 2026
One-click install
npx skills add https://github.com/ghbvf/gocell --skill sonar-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sonar-scan
Source: https://github.com/ghbvf/gocell/tree/main/.claude/skills/sonar-scan
Command: npx skills add https://github.com/ghbvf/gocell --skill sonar-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

从 SonarCloud 获取静态扫描结果(质量门、issues、hotspots),并将结果汇总以便团队监控代码质量与合规性。

Core Features & Use Cases

  • 获取最新的质量门状态、未解决的问题、漏洞和热点等关键指标,便于快速了解当前代码基线。
  • 生成结构化快照,支持推送到仪表板、告警系统,或作为发布门控的输入。
  • 适用于 CI/CD、代码审计和治理工作流,跨多个仓库汇总质量信息。

Quick Start

执行导出脚本以获取最新的 SonarCloud 扫描结果并生成报告。

Frequently Asked Questions about sonar-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fetch SonarCloud static scan results for CI/CD reporting?

To fetch SonarCloud static scan results, you run a Python export script that requires SonarCloud token access to extract quality gates, issues, and hotspots, generating a structured snapshot for CI/CD reporting and governance.

What SonarCloud metrics are included in the static scan report?

The static scan report includes the latest quality gate status, unresolved issues, vulnerabilities, and security hotspots, providing a baseline snapshot to monitor code quality and compliance across multiple repositories.

Do I need a SonarCloud token to extract quality gate status and issues?

Yes, you need a SonarCloud token to authenticate and extract quality gate status, issues, and hotspots. The Python export script requires this token access to generate your project's quality metrics snapshot.

Can I use SonarCloud scan snapshots as quality gates in release workflows?

Yes, SonarCloud scan snapshots can be used as release quality gates. The structured output can be pushed to dashboards or alerting systems, serving as a gate input for CI/CD governance workflows.

What's the best way to automate code quality reporting across multiple repositories?

Automating code quality reporting across multiple repositories is best handled by running the Python export script within CI/CD workflows to aggregate SonarCloud quality gates, issues, and hotspots into a unified snapshot.